$ rpki-client -vvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3136392e39362e302f32342d3234203d3e20323732343336.roa File: 34352e3136392e39362e302f32342d3234203d3e20323732343336.roa (raw, json) Hash identifier: R9X+snJairB7bVsyitDxDi6+enAiIXl1nUD8Has2P04= Subject key identifier: 4B:EC:35:F6:0E:A0:F1:73:17:6E:75:97:C2:84:E3:27:FE:6E:FE:BE Certificate issuer: /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4 Certificate serial: 5C49CC066311A37D387640390582EC68C4CC2543 Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer Subject info access: rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3136392e39362e302f32342d3234203d3e20323732343336.roa Signing time: Tue 24 Mar 2026 00:04:38 +0000 ROA not before: Mon 23 Mar 2026 23:59:38 +0000 ROA not after: Tue 23 Mar 2027 00:04:38 +0000 asID: 272436 IP address blocks: 45.169.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 07:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:49:cc:06:63:11:a3:7d:38:76:40:39:05:82:ec:68:c4:cc:25:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4 Validity Not Before: Mar 23 23:59:38 2026 GMT Not After : Mar 23 00:04:38 2027 GMT Subject: CN=4BEC35F60EA0F173176E7597C284E327FE6EFEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:b9:70:8f:58:92:c9:5f:63:aa:cb:db:bc: 84:94:8e:b5:94:b1:8b:91:f2:c8:b2:1a:6f:a3:08: 2f:ac:59:14:b1:94:8e:c6:07:c0:dc:98:9a:b8:fd: 82:3c:a1:80:5e:3d:fd:07:3c:e3:df:28:6b:15:1c: 99:4a:bd:d1:cd:36:98:bf:f1:e7:c1:d1:84:60:53: b0:ae:53:29:d5:06:78:26:9b:af:de:71:25:dc:c0: e7:76:1a:f1:1c:57:c3:39:9a:37:e8:d2:6d:07:50: f5:96:20:a9:3b:d9:6f:16:ad:40:df:ea:35:d8:56: 8a:89:10:96:2a:b0:d1:7b:f4:2e:d6:4d:70:90:4a: f9:40:cb:f0:7e:0f:00:70:4e:1d:02:24:51:90:1d: 60:8e:31:8f:62:e4:84:2d:d7:de:e9:7e:eb:a8:ef: 1d:4d:9a:15:e1:d5:5c:50:b6:aa:51:68:4b:64:37: 09:7c:97:6c:b8:f1:d8:23:bd:26:ee:be:f2:79:f0: 01:11:0b:fa:46:77:55:ae:7c:c0:f7:6a:45:03:63: c7:21:59:db:87:8f:39:f8:09:f7:39:a8:8c:9d:6a: 41:71:9a:c4:81:bc:81:e7:8d:d2:c5:be:4d:64:08: 44:97:58:97:d9:0c:7b:65:6b:35:2a:8f:1a:e6:33: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EC:35:F6:0E:A0:F1:73:17:6E:75:97:C2:84:E3:27:FE:6E:FE:BE X509v3 Authority Key Identifier: keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3136392e39362e302f32342d3234203d3e20323732343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.96.0/24 Signature Algorithm: sha256WithRSAEncryption 11:4d:45:98:c1:ac:cb:18:55:ba:d3:2e:a5:cc:ac:e7:79:89: 85:c7:37:9a:3d:94:4c:90:22:b8:b8:11:7c:5a:e0:24:10:ed: 9c:f9:2c:b1:de:ce:54:8f:bc:60:5e:b5:00:fd:32:a1:1b:84: b9:c9:a1:ac:2d:76:da:ff:d2:08:44:bd:a1:e3:a3:ff:b2:5d: 2c:17:19:24:5b:3d:61:97:b7:71:f5:d9:5d:ea:bd:18:03:51: bb:d7:d2:cb:6b:78:d4:8a:58:05:0f:1e:ad:e6:32:d8:e1:01: ae:ac:f9:6e:60:4c:37:3b:c9:f2:59:90:ae:25:e6:ce:51:e7: 0e:5c:00:88:d0:84:4c:31:b5:96:e8:fb:cc:52:a8:f5:c5:b9: 8f:bb:50:41:b9:91:9a:54:2c:6e:2b:88:8d:53:ad:22:ff:d1: f0:77:4b:ac:ed:75:fb:40:98:8b:50:47:f7:69:79:e2:39:27: 60:1d:0c:26:f1:9c:9e:31:ce:c6:3b:ce:f7:1e:3b:28:d0:b6: 9a:79:d8:20:ad:f7:16:61:ab:70:71:da:17:8c:30:68:37:36: dd:f7:17:17:f1:34:28:1e:e1:0e:25:a8:1c:70:17:d7:c1:68: d6:c3:16:2a:21:72:82:08:27:cf:09:5b:ae:ad:29:07:4f:99: ad:97:e6:11 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXEnMBmMRo304dkA5BYLsaMTMJUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVCNjRDNEJEOEU4MzBDRTE0N0Y2RUJDNDcxOTlCRUFF N0U2M0JCNDAeFw0yNjAzMjMyMzU5MzhaFw0yNzAzMjMwMDA0MzhaMDMxMTAvBgNV BAMTKDRCRUMzNUY2MEVBMEYxNzMxNzZFNzU5N0MyODRFMzI3RkU2RUZFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7G7lwj1iSyV9jqsvbvISUjrWU sYuR8siyGm+jCC+sWRSxlI7GB8DcmJq4/YI8oYBePf0HPOPfKGsVHJlKvdHNNpi/ 8efB0YRgU7CuUynVBngmm6/ecSXcwOd2GvEcV8M5mjfo0m0HUPWWIKk72W8WrUDf 6jXYVoqJEJYqsNF79C7WTXCQSvlAy/B+DwBwTh0CJFGQHWCOMY9i5IQt197pfuuo 7x1NmhXh1VxQtqpRaEtkNwl8l2y48dgjvSbuvvJ58AERC/pGd1WufMD3akUDY8ch WduHjzn4Cfc5qIydakFxmsSBvIHnjdLFvk1kCESXWJfZDHtlazUqjxrmM57rAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUS+w19g6g8XMXbnWXwoTjJ/5u/r4wHwYDVR0j BBgwFoAUJbZMS9joMM4Uf268Rxmb6ufmO7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjJDSGVoR1V4cGRNaGhQR2czdXdDNngxNk1kZ3I0QjlpaU44SDZkYWJ4 bksvMC8yNUI2NEM0QkQ4RTgzMENFMTQ3RjZFQkM0NzE5OUJFQUU3RTYzQkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QjY0QzRCRDhFODMwQ0Ux NDdGNkVCQzQ3MTk5QkVBRTdFNjNCQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIyQ0hlaEdVeHBkTWhoUEdnM3V3QzZ4MTZNZGdyNEI5aWlOOEg2ZGFieG5LLzAv MzQzNTJlMzEzNjM5MmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALalgMA0GCSqGSIb3DQEBCwUAA4IBAQARTUWYwazL GFW60y6lzKzneYmFxzeaPZRMkCK4uBF8WuAkEO2c+Syx3s5Uj7xgXrUA/TKhG4S5 yaGsLXba/9IIRL2h46P/sl0sFxkkWz1hl7dx9dld6r0YA1G719LLa3jUilgFDx6t 5jLY4QGurPluYEw3O8nyWZCuJebOUecOXACI0IRMMbWW6PvMUqj1xbmPu1BBuZGa VCxuK4iNU60i/9Hwd0us7XX7QJiLUEf3aXniOSdgHQwm8ZyeMc7GO873Hjso0Laa edggrfcWYatwcdoXjDBoNzbd9xcX8TQoHuEOJagccBfXwWjWwxYqIXKCCCfPCVuu rSkHT5mtl+YR -----END CERTIFICATE-----Generated at Thu Mar 26 22:48:39 2026 by rpki-client